Overview
Plain English summary: Shipfront collects your email address to put you on our waitlist. We don't sell it, share it with advertisers, or use it for anything other than product updates. You can unsubscribe or request deletion at any time.
Shipfront ("we", "our", or "us") operates the website shipfront.dev. This Privacy Policy explains how we collect, use, store, and protect personal information you provide when you visit our site or join our waitlist.
By using Shipfront, you agree to the practices described here. If you disagree, please do not use the site or submit your information.
Data We Collect
We collect the following categories of personal data:
Information you provide directly:
- Email address — when you join the waitlist via the email form.
- Name and Google profile — when you choose "Continue with Google" (optional). We receive your name, email, and profile picture from Google's OAuth service.
Information collected automatically:
- Server logs — Vercel (our hosting provider) may log IP addresses, browser type, and request timestamps for security and performance monitoring. We do not access these for marketing purposes.
- Session tokens — a temporary, encrypted session cookie is set after Google OAuth to keep you signed in during your visit.
We do not use analytics tracking tools (e.g. Google Analytics), advertising pixels, or third-party behaviour tracking scripts on this site.
How We Use Your Data
We use the data we collect for the following purposes only:
- To add you to our waitlist and confirm your subscription via email.
- To send you infrequent product updates — major milestones, launch announcements, and early access invitations.
- To prevent spam and abuse (via the honeypot field in our form).
- To verify your identity during a Google OAuth session.
We do not use your data for advertising, profiling, or automated decision-making.
Data Sharing & Third Parties
We share your data only with the service providers necessary to operate Shipfront:
- Upstash (upstash.com/privacy) — a serverless Redis database used to store waitlist email addresses and subscription events. Data is stored in encrypted form at rest.
- Resend (resend.com/legal/privacy-policy) — a transactional email provider used to send confirmation and launch emails. Your email is transmitted to Resend when we send you a message.
- Vercel (vercel.com/legal/privacy-policy) — our hosting and serverless function provider. Vercel may process request metadata including IP addresses as part of its infrastructure.
- Google OAuth (policies.google.com/privacy) — used only if you choose to sign in with Google. Google processes your login and returns your profile to us.
We do not sell, rent, or trade your personal data to any third party for any commercial purpose.
Storage & Security
Your email address is stored in Upstash Redis, hosted in the EU-West-1 region by default, with encryption at rest and in transit (TLS). Upstash is SOC 2 Type II certified.
All traffic to shipfront.dev is served over HTTPS using a TLS certificate automatically provisioned and renewed by Vercel via Let's Encrypt.
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. However, no internet transmission is 100% secure.
Your Rights
Depending on your location, you may have the following rights under GDPR (EU/UK), CCPA (California), or other applicable law:
- Access — request a copy of the data we hold about you.
- Correction — ask us to correct inaccurate data.
- Deletion — ask us to delete your email from the waitlist at any time.
- Portability — receive your data in a machine-readable format.
- Objection / Opt-out — unsubscribe from emails at any time using the unsubscribe link in any email we send.
To exercise any of these rights, email us at privacy@shipfront.dev. We will respond within 30 days.
Children's Privacy
Shipfront is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact privacy@shipfront.dev and we will promptly delete it.
Changes to This Policy
We may update this Privacy Policy as Shipfront evolves. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify waitlist members by email.
Continued use of the site after changes are posted constitutes your acceptance of the updated policy.
Contact
If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, please contact us:
- Email: privacy@shipfront.dev
- Website: shipfront.dev
For EU/UK residents, if you are unsatisfied with our response you have the right to lodge a complaint with your local data protection authority.